I think it's important that the pros and cons of Suhosin as a patch is evaluated. A conservative approach would not help in making PHP any better. We need to make sure whatever be the case the PHP developers who thrive on the improvements made in the language are benefited, the language as a whole is benefited. We owe it to the the PHP world as we want it to compete with other languages in all aspect and security being the foremost.